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Abstract 

One of the main problems in quantum complexity theory is that our understanding 
of the theory of QMA-completeness is not as rich as its classical analogue, the NP- 
completeness. In this paper we consider the clique problem in graphs, which is NP- 
complete, and try to find its quantum analogue. We show that, quantum clique problem 
can be defined as follows; Given a quantum channel, decide whether there are k states 
that are distinguishable, with no error, after passing through channel. This definition 
comes from reconsidering the clique problem in terms of the zero-error capacity of 
graphs, and then redefining it in quantum information theory. We prove that, quantum 
clique problem is QMA-complete. 

In the second part of paper, we consider the same problem for the Holevo capacity. 
We prove that computing the Holevo capacity as well as the minimum entropy of a 
quantum channel is NP-complete. Also, we show these results hold even if the set of 
quantum channels is restricted to entanglement breaking ones. 

1 Introduction 

One of the basic results of complexity theory is Cook-Levin theorem. That is, SAT, the 
problem of whether a Boolean formula has a satisfying assignment or not, is NP-complete. 
In fact, the Cook-Levin theorem was the beginning of the theory of NP-completeness. After 
SAT, a series of natural problems in graph theory and combinatorics were shown to be NP- 
complete as well, see |27j . Hamiltonian cycle, clique problem, graph coloring, subset sum 
and vertex cover are examples of such problems. The rich theory of NP-completeness has 
been used in other parts of complexity theory as well. For instance, the basic ideas of such 
important results as IP = PSPACE [53], and the PCP theorem [3], are from this theory. 

In quantum complexity theory, Kitaev's result [13) is considered as the quantum analogue 
of Cook-Levin theorem. The complexity class QMA was defined by Watrous as the quantum 
analogue of NP. QMA is the class of problems that can be solved by a quantum polynomial 
time algorithm given a quantum witness. Then Kitaev defined a natural problem in physics, 
called the local Hamiltonian problem and showed it is QMA-complete, [13] . Indeed, the 
local Hamiltonian problem is considered as the quantum version of SAT problem, and also 
Kitaev's result as the quantum analogue of Cook-Levin theorem. Thus, same as in classical 
case, one would guess that this is the beginning of a rich theory for QMA-complete problems. 
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After Kitaev's theorem few problems have been shown to be QMA-complcte. For in- 
stance, circuit identity testing [9] and local consistency problem [29] are such problems. But 
this class is not as rich as the class of NP-complete problems. 

One of the most natural ways of thinking of QMA-complete problems is to somehow 
define the quantum version of problems that are known to be NP-complete. An example of 
such a problem is the clique problem in graphs. 

1.1 Quantum-clique problem 

In a graph G a clique is a subset of vertices every two of which are adjacent, and the size of 
a clique is the number of its vertices. The clique problem is that given a graph G and an 
integer number k, decide whether G contains a clique of size k or not. It is well-known that 
clique problem is NP-complete, [27] . 

We can think of this problem in G c , the complement of graph G. In the complement of 
G a clique is changed to an independent set. An independent set in a graph is a subset of 
vertices no two of which are adjacent, and the maximum size of an independent set is called 
the independence number of G, denoted a{G). So the clique problem in the complement 
graph reduces to decide whether a(G) > k, and then it is NP-complete. 

This reduction is important because the problem of computing a(G) is related to the 
problem of computing the zero-error capacity of a channel. Zero-error capacity of a classical 
(discrete memoryless) channel is the maximum rate of information that one can send through 
channel without error. This concept is first introduced by Shannon in his famous paper [25j . 
and got much attention after that. For a survey on this topic see [14] . Also some interesting 
results on graph capacity are presented in [2] [8] [15] . 

Indeed, any classical channel corresponds to a graph G, and the zero-error capacity of 
the channel can be computed in terms of the independence number of G and its powers. We 
will get to this correspondence latter on, but here we mention that the best way of coding 
messages in words of length one is to find an independent subset of size a(G). Therefore it 
is NP-complete to find such a codeword. 

This way of thinking of clique problem is useful because it is in terms of channels and 
their zero-error capacity, the concepts that are already known in quantum information 
theory. The definition of a quantum channel is well-known in the theory. Also extending 
the definition of zero-error capacity to quantum channels is straightforward, [IB]. That is, 
what is the maximum rate of classical information that can be sent through a quantum 
channel with zero-error and without using entanglement. Thus, the same question as in the 
classical case arises; How can we compute the zero-error capacity of a quantum channel? 

As in classical case let us first try to code the messages in words of length one (not in 
product states). Then the question is that, are there k states that after passing through 
channel can be recognized with no error? This is exactly the quantum analogue of the clique 
problem. So we call it the quantum clique problem. In this paper we prove that quantum 
clique is QMA-complete. 

1.2 Computing the channel capacity 

In the previous section we said that the problem of estimating the zero-error capacity of a 
classical channel (graph) is NP-complete, and its quantum analogue is QMA-complete. Both 
of these problems are about the channel capacities in the zero-error case. But, how hard is 
to compute the usual capacity of a channel? 

In the classical case, there is an algorithm, called Arimoto-Blahut algorithm, that com- 
putes the capacity of a classical channel efficiently, [3] [5]. In the quantum case, the same idea 
as in Arimoto-Blahut algorithm leads us to an algorithm for computing the Holcvo capacity, 
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see [2Ql E2] - The idea is to use Klein's inequality, [21], iteratively and find a sequence that 
converges to a local maximum of the expression in the Holevo capacity. Although finding 
this sequence can be done in polynomial time, it gives a local maximum not a global one, 
and unlike the classical case a local maximum is not a global one. So, the quantum version of 
Arimoto-Blahut algorithm fails. Here, we show that finding a bound for the Holevo capacity 
of a quantum channel is NP-complete. 

To prove this result we first show that computing the minimum entropy of a quantum 
channel is N P-hard and then convert the problem of computing the Holevo capacity to this 
one. 

2 Preliminaries 
2.1 QMA 

Definition 2.1 A language L is said to be in QMA = QMA(2/3, 1/3) if there exists a 
quantum polynomial time verifier V such that 

• Completeness: Vx e L, 3 Pr(V (\x)\£)) accepts) > 2/3. 

• Soundness: Vx £ L,V|£), Pr(V(\x)\£)) accepts) < 1/3. 

An easy amplification argument implies that the completeness and soundness bounds, 
2/3 and 1/3, are not crucial and can be replaced by any functions a(n) and b(n) provided 
that, they are different from and 1 by an inverse exponential function, and also there is 
an inverse polynomial gap between them. In other words, if a(n) and b(n) are two functions 
such that < b(n) < a(n) < 1, and for some constant c, 

a(n) < 1 - e- nC , b{n)>e~ n \ 

and 

a(n) — b(n) < n~ c , 
then QMA(a, b) = QMA(2/3, 1/3) = QMA, see [J. 

Definition 2.2 k-Local Hamiltonian problem (Hi, . . . H s , a, b) 

• Input: An integer n, real numbers a, b such that b — a > n~ c , and polynomially 
many Hermitian non-negative semidefinite matrices Hi, . . . H s with bounded norm, 
II H || < 1, such that each of them acts just on k of n qubits. 

• Promise: The smallest eigenvalue of Hi + . . . H s is either less than a or greater than 
b. 

• Output: Decide which one is the case. 

Kitaev proved that local Hamiltonian problem for k — 5 is QMA-complete [13], but latter 
this result was improved in [11] and [ID] . 

Theorem 2.1 2-local Hamiltonian problem is QMA-complete. 
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2.2 QMA 



We said that QMA(a, b) is equal to QMA(2/3, 1/3) if a ^ 1, b ^ 0, and there is a polynomial 
gap between them. But one may ask about the case where a = 1, or b = 0, i. e. perfect 
completeness or soundness. For instance QMA(1, 1/3), is set of languages that have a pro- 
tocol as in definition 12.11 with completeness bound 1 and soundness bound 1/3. Same as 
before, an amplification argument shows that if b(n) is such that e~ n < b(n) < 1 — n~ c , 
for some constant c, then QMA(1, b) — QMA(1, 1/3). Therefore, we get to an enough robust 
complexity class, denoted QMA!, where the subscript 1 shows the perfect completeness. 

This complexity class was first introduced by Bravyi [7j- He also defined the quantum 
k- SAT problem which is a special case of local Hamiltonian problem. To state this problem 
precisely we need to fix some notions. In the Hilbert space of n-qubits, a projection is a 
Hermitian operator II such that II 2 = II, i.e. eigenvalues of II are and 1. Also, we say II 
is a fc-projection if it acts just on k qubits. 

Definition 2.3 Quantum k-SAT problem (IT, . . .II S , e) 

• Input: An integer n, a real number e > n~ c , and polynomially many k-projections 

III,... IT. 

• Promise; Either there exists an n-qubit state \ip) such that IIj|^>) = for all i, or 
Zi(mi\^)>eforall\i;). 

• Output: Decide which one is the case. 

Given a witness in polynomial time we can decide whether IIi|^>) = or not, and 
then fc-SAT is in QMA!. But we should be careful because we need a protocol that has no 
error if \tp) is the right witness (the common eigenvector of IT's). It means that the verifier 
should be able to check IT \ip) —0 with no error, or equivalcntly, the verifier should be able 
to implement the projection IT exactly. 

This extra condition on the verifier for QMA! protocols arises naturally not only for 
quantum fc-SAT, but also for any other problem in this class. If we can implement the 
gates just with an approximation, then our algorithm contains some error anyway. This 
problem can be resolve by emphasizing that the verifier can implement all quantum gates 
up to three-qubit gates, exactly. So in this paper, by a quantum verifier for QMAj protocols 
we mean the one that has all three-qubit quantum gates in hand. Bravyi pointed out this 
assumption in [7] and proved the following lemma. 

Lemma 2.1 Let U be a unitary operator acting on k qubits. Then U can be exactly repre- 
sented by a quantum circuit of size poly(k)2 2k with three-qubit gates. 

Also he showed the following theorem, that has almost the same proof as theorem 12.11 

Theorem 2.2 Quantum AS AT is QMA 1 -complete. 

Both theorems 12.11 and 12.21 are important in the theory of QMA-complete problems. 
Because if we show some problem is in QMA, (QMAi) and also find a reduction from 
local Hamiltonian (quantum SAT) to it then we conclude that it is QMA-complete (QMA X - 
complete) . 
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2.3 Zero-error channel capacity 

A classical discrete memoryless channel consists of an input set X, an output set Y, and 
probability distributions p(y\x) for every x € X and y G Y, meaning that if we send x 
through channel we get y as output with probability p(y\x). Since, we want to define the 
zero-error capacity of this channel, the exact value of p(y\x) is not important for us, but 
whether it is zero or not. Therefore, to get a clearer representation, we correspond to the 
channel a graph G on the vertex set X in which two vertices x, x' S X are adjacent if there 
is y e Y such that p(y\x),p(y\x') are both non-zero. It means that, x,x' are adjacent in G 
if they can be confused after passing through channel. Hence, some messages x\, . . .Xk can 
be sent through channel with no error iff there is no edges between them, i. e. {xi, . . . Xk] 
is an independent set. 

Definition 2.4 In a graph G, a subset of vertices no two of which are adjacent is called an 
independent set. Also a(G) denotes the maximum size of an independent set in G. 

By the above discussion, if we want to code our messages in words of length one (one 
use of channel) then the best way is to code them in an independent set of maximum size. 
In this case we get to the rate a(G). But we may use words of length two. In this case we 
get to another graph, denoted G £g) G. 

Definition 2.5 Assume G and H are two graphs on vertex sets V and U , respectively. 
Then their tensor product G ® H is a graph on the vertex set V X U such that (vi, u\) and 
(v2,U2) are adjacent if V\, v% are either equal or adjacent in G, and also U\,U2 are either 
equal or adjacent in H . 

It is not hard to see that the graph corresponding to words of length two is G(E> G. Thus, 
the best way to code the messages in words of length two is to use an independent set in G®G 
of size a(G G). So we get to the rate a(G (g> G) 1 / 2 (square root is for normalization). 
Repeating this argument for higher products, we get to the following definition due to 
Shannon [25] . 

Definition 2.6 0(G), the capacity of the graph G, is equal to 

6(G) = lim a(G®")". 

n — >oo 

These definitions all can be generalized for quantum channels, [IHl 0~7]. The zero-error 
capacity of a quantum channel is the maximum rate of classical information that one can 
send through a quantum channel without using entanglement. To get a closed form expres- 
sion for this quantity, suppose $ is a quantum channel, and we code k messages in quantum 
states pi, . . . pk- If we want to decode the outputs of channel with no error, we should be 
able to identify states $(pi), . . . 3>(p&) without error. It is well-known that some quantum 
states can be recognized with no error iff they have orthogonal supports. 

Definition 2.7 For a quantum channel $, a($) is the maximum number of states px,..-Pk 
such that $(pi), . . . $>(pk) have orthogonal supports. 

Also, a($®") is the maximum number of product states pn ® ■ ■ ■ ® pi n , i = 1, . . . k, such 
that all states <&® n {pn ® ■ ■ ■ ® Pin), i = 1, ■ ■ - k, have orthogonal supports. 

To make it clear we should highlight two points. First of all, if $(p) and $(/?') have 
orthogonal supports then p and p 1 also have orthogonal supports. Therefore a(<i>) is at most 
the dimension of input states, and is finite. Second, we emphasize that the input states of 
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<&® n should be product states (because we do not want to use entanglement) and by abuse 
of notation we denote the maximum number of such product states by a($® n ). 

By the above definition it is clear what the zero-error capacity of a quantum channel 
should be. 

Definition 2.8 0( < i ) ), the zero-error capacity of the quantum channel <f>, is 



2.4 How to compute a($) 

We do not repeat all the known properties of a($) and refer the reader to [IB]. Here, we 
need just two basic properties. Suppose a($) = n, and p±, . . . p n are n states such that the 
supports of <f>(pi), . . . $(pn) are orthogonal. For i = 1, . . . n, let \^>i) be a pure state in the 
support of pi. Then, since the support of $(|^)) is a subspace of the support of 
the states $(|^i)), . . . ^{\4> n )) have orthogonal supports as well. It means that, to compute 
a($) it suffices to restrict ourselves to pure states. 

Now assume that the operator sum representation of <f> is 



where J2k=i ^k^k — I- Then the support of 0>(\ipi)) is spanned by vectors Eifyi), . . . E r \ipi). 
Therefore &(\ipi )), . . .$>(\ip n )) have orthogonal supports iff these vectors, for different indices 
i and j, are orthogonal. Summarizing these two statements, we get to the following propo- 
sition. 

Proposition 2.1 For a quantum channel $ with operator sum representation {Ip, we have 
a($) > n if and only if there exist pure states ■ ■ ■ \ipn) such that (ipi\ElEi\ipj) = 0, for 
every k,l and i,j, where i =/= j. 

2.5 Quantum clique problem 

We know that deciding whether a given graph has a clique of size k is NP-complete. Con- 
sidering this problem in the complement graph we find that, deciding whether a(G) > k is 
NP-complete. In our notion, it means that having a classical channel, deciding whether by 
coding messages in words of length one, we can get to the rate k for transmitting information 
with zero-error, is NP-complete. Since we have all these notions for the quantum case we 
can define the quantum clique problem. 

Basically, the quantum version of clique problem is also to decide whether a(<i>) > k, for 
a given quantum channel It is equivalent to decide whether there exist quantum states 
p 1 , ■ ■ ■ p k such that ^(p 1 ), ■ ■ ■ $(p k ) have orthogonal supports or not. Note that, for any two 
states er 1 , a 2 , we have tria^a 1 ) > and equality holds if and only if a 1 , a 2 have orthogonal 
supports. 

Let cr 1,2 = er 1 <g) a 2 then tr^a 2 ) — tr^a 1 - 2 ), where S is the swap gate (S\t(i)\(f>) = 
\<fi)\ip}). Therefore by applying the swap gate we can estimate trip^a 2 ). But notice that 
if cr 1,2 is not separable then this equality does not hold and the orthogonality of a 1 and 
er 2 is not implied by tr(S a 1,2 ) = 0. To resolve this problem we can restrict ourselves to 
entanglement breaking channels to ensure that the output states of the channel are not 
entangled. 



6($)= lim a($^ n )^. 




(1) 



G 



A quantum channel $ is called entanglement breaking if there are POVM {Mi} and 
states <Ji such that 

$(p) = Y,tr(M i p)a i . 

i 

In this case, $ (g)2 (p 1 ' 2 ) is always separable, tr(S $® 2 (p 1,2 )) > and equality implies ^(p 1 ) 
and $(p 2 ) are orthogonal. 

Definition 2.9 Quantum clique problem (<£>, k, a, b) 

• Input Integer numbers n and k, non-negative real numbers a, b with an inverse poly- 
nomial gap b — a > n~ c , and an entanglement breaking channel $ that acts on n-qubit 
states. 

• Promise Either there exists p 1 ® ■ ■ ■ ® p k such that J2i j tr(S ^(p l ) <g> ^(p 3 )) < a or 
for any state (0 1 > 2 - fc we have £\ , -tr(S $® 2 (/9 lJ ')) > 6. 

• Output Decide which one is the case. 

Notice that, if we let a = we get to the exact orthogonality assumption that is a special 
case of quantum clique, and in general is a simpler problem. Indeed, we show that quantum 
clique problem is QMA-complete, and in the special case where a = and $ is restricted to 
quantum-classical channels, it is QMAx-complete. 

2.6 Holevo capacity 

The Holevo capacity of a quantum channel is the maximum rate of classical information 
that can be sent through a quantum channel without using entanglement, |2l. . Assume 
that $ is a quantum channel. Then x(^)> the Holevo capacity of $, is equal to 

= max ff(Vpi*( ft )) - VjxJJ(*( ft )), (2) 
Pi, Pi * — ' — J 

i i 

where H(p) = —tr(p log p) denotes the von Neumann entropy, and the maximum is taken 
over probability distributions {p{\ and quantum states {pi}. Using the convexity of von 
Neumann entropy, we can assume that states pi are pure. Also, if <!> acts on an n-dimensional 
Hilbert space then we may assume that number of p^s is at most n 2 , |21j . However, these 
are not enough information on what the maximum point is, and how we can compute 

There is an algorithm called the Arimoto-Blahut algorithm that given a classical discrete 
memoryless channel computes its capacity, see [3J [5] . Indeed, computing the capacity of a 
classical channel involves maximization of some mutual information. In the Arimoto-Blahut 
algorithm this maximization problem is converted to an alternating maximization one, that 
tends to the channel capacity and is more tractable. Using the same idea, Nagaoka in [20] 
proposed the same algorithm to compute the Holevo capacity . But, the point is that in 

there can be a local maximum which is not a global one. So that, in the quantum 
Arimoto-Blahut algorithm the alternate maximum value may tend to a local maximum, not 
to x($)- 

In this paper, we prove that computing x(3>) is NP-complete. In fact, a more strong 
theorem holds: computing the Holevo capacity of entanglement breaking channels is NP- 
complete. 
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2.7 Minimum entropy of a quantum channel 



Minimum entropy of a quantum channel is equal to the minimum entropy of its output 

states, 

miniT(*(p)). (3) 

p 

Again, using the convexity of von Neumann entropy, the minimum is achieved on pure 
states. The minimum entropy is an important invariant of quantum channels. Indeed, 
it is proved that the famous additivity conjecture of Holevo capacity is equivalent to the 
additivity of minimum entropy, [26]. This result is important for us because it somehow 
expresses the minimum entropy in terms of Holevo capacity, and using this idea we convert 
the problem of computing the minimum entropy to the problem of computing Holevo ca- 
pacity. Indeed, to prove that computing Holevo capacity is NP-complete, we first state the 
N P-completeness of computing minimum entropy. 

2.8 SWAP test 

SWAP test is a well-know protocol for deciding whether two given quantum states are the 
same or not. The protocol is as follows. Given two states \4>i) and \1jj2) and an ancilla 
qubit |0), first apply the Hadamard gate on the ancilla, then the controlled-swap gate on 
two registers, and again, Hadamard on the ancilla. At the end, measure the ancilla qubit in 
the computational basis. It is easy to see that this protocol computes the channel 

iW(IVi>IV> 2 » = ~(i + 1(^ 2 )| 2 )|0)(0| + i(i - |(^ 2 )| 2 )|i)(i|. (4) 

In fact, in the measurement we get |0) with probability |(1 + K^ilV^)! 2 ) and |1) with 
probability i(l — \ (tpi\tp 2 }\ 2 )- Therefore, if we correspond the output |0) to +1 and output 
|1) to —1 then the expected value of this number is equal to K^ilV^)) 2 - In general, when the 
input state is a 12 we can compute tr(S a 12 ), where S is the swap gate (S\ipi}\ip2) = IV^IV'i))- 



3 Complexity of quantum clique problem 

3.1 Quantum clique is QMA-complete 

Here is the main theorem of this section. 

Theorem 3.1 The quantum clique problem ($, k, a, b) where $ is an entanglement breaking 
channel on n-qubit states and has the operator sum representation 

r 

$(p)=J2EipEl (5) 

i=l 

where E^Ei — I and r = poly(n), is QMA-complete. 

Proof: First we show that ($, k, a, b) is in QMA. Note that, <I> can be written as &(p) — 
tr2{Up® \l)(l\W), where U is a unitary operator and 

r 

[/iv>ii} = e ^ww- (e) 

i=l 
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Since r = poly(n), a polynomial time verifier can implement U and then $, with arbitrary 
small error. Therefore, given witness p 1 '"' fc , verifier can randomly choose 1 < i, j < k, 
compute $® 2 (p l,: '), and then apply the SWAP test. As we said in section |2~51 the expected 
value of the outcome of SWAP test for fixed i,j, is fr(S , $® 2 (p lJ )), and for random choices 
of i,j is equal to 

which is either less than k ^-i) a 01 g re &ter than k ^ k 2 _ 1 -j b. Hence, there is an inverse poly- 
nomial gap between them and the verifier can recognize them in polynomial time. Thus, 
quantum clique problem is in QMA. 

To prove the hardness, we establish a polynomial time reduction from local Hamiltonian 
problem to quantum clique. Let (Hi, . . . H s , a, b) be an instance of local Hamiltonian prob- 
lem. Since || Hi ||< 1, then ^H < I, where H — ^ Hi. Thus, M = I — ^H is a positive 
operator and we can define the following quantum channel 

$(p) = -tr(H ®/p)|00)(00| + tr(M ®|Q)(0|p)|ll)(ll|+*r(M®|l)(l|p)|lQ)(10|. 

Note that, s = poly(n) and then $ is of the form of ([5]), (r = poly(n)). So, we can consider 
($, k = 2, -iz-a 2 , -i?b 2 ) as an instance of quantum clique. We prove that (Hi, . . . H s , a, b) is a 
"yes" instance of local Hamiltonian if and only if ($, k — 2, p-a 2 , -^b 2 ) is a "yes" instance 
of quantum clique. 

Suppose (Hi, . . . H s , a, b) is a "no" instance. Then for any state a, tr(Ha) > b, and 
then, for any state p 1,2 we have 

tr(S^® 2 (p^ 2 )) > ^tr(H ® I p l )tr(H ® I p 2 ) > ^b 2 . 

So, (<&, k — 2, -^a 2 , t-6 2 ) is also a "no" instance. Now, assume that there is \tp) such that 
(ii\H\ip) < a. Let /= \ip)(ip\ (g> |0)(0|, and p 2 = \ip)(ip\ (g> |1)(1|. We have 

t^S^p 1 )®^ 2 )) 

= tr((i(^|lf^)|00)<00| + (^|M|^)|ll}(ll|)(i^|if|^)|00)(00| + (^|M|^)|10)(10|)) 

= y 2 (mw<^a 2 . 

Therefore, ($, k = 2, j^a 2 , is also a "yes" instance. 

□ 

3.2 Channels that can be implemented exactly 

Theorem 13.11 savs that quantum clique problem ($,fc,a, b) is QMA-complete. In this QMA 
protocol since, in general, a is a positive number, we are allowed to have some probability 
of error. But one may consider the case a = and try to find a protocol with no error. 
Recall that, if a = then ($, k, a = 0, b) exactly says that whether a($) > k or not. Here, 
we show that this problem is QMAi-complete. 

The first step toward proving such a result is to show that if a = then quantum clique 
is in QMA! . But, QMA! consists of problems that have a quantum Merlin- Arthur prorocol 
with one sided error, and in fact perfect completeness. So, we should be able to check the 
orthogonality of two quantum states without error. But, in general, the SWAP-test, that 
we applied in theorem 13. 1[ contains some non-zero probability of error. 
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The idea to resolve this problem is to restrict ourselves to the special case of quantum- 
classical channels (q-c channels). A channel $ is called a q-c channel if it can be written in 
the form 

r 

$(p) = 5>(Mip)|i><i|, (7) 
i=l 

where {Mi, . . . M r } is a POVM and |1), . . . |r) are orthogonal states. Checking orthogonality 
of two outcome states of these channels is easy. Given two such states 3>(p), &(p'), we can 
measure them in the basis |1), . . . \ r). If the outcome of the measurements were the same 
then their supports are not orthogonal. 

Another restriction that we should keep in mind is that, the verifier should be able to 
compute Q(p), exactly. If the verifier could just implement <!> with some approximation, 
then all the computation contains some probability of error. In fact, this is the same kind of 
restriction that we mentioned for the quantum 4-SAT problem. So, we should restrict the 
set of channels to the quantum channels that can be implemented exactly by a polynomial 
time quantum verifier. In section \2. 21 we pointed out that by a quantum verifier for QMAi 
protocols we mean the one that can implement all 3-qubit quantum gates, exactly. But, 
it does not mean that we can implement any channel with no error. So, we should clarify 
that, in this case, by a quantum channel we mean the one the can be implemented exactly 
by a quantum verifier. We do not need to classify all of these channels. We just need to 
show that this class of channels is enough rich. 

Lemma 3.1 

(i) Any quantum channel that acts just on a constant number of qubits and has an operator 
sum representation of the form |5|) where r is a constant can be implemented with no 
error. 

(ii) For polynomially many channels $i, . . . 3> s that can be implemented exactly, - 
can be implemented with no error. 

(iii) If II is a k-projection where k is a constant, then the following channel can be imple- 
mented exactly 

= *r(n®Jp)|00><00H-*r((/-n)<8»|0><0| p)|ll><ll|+tr((J-II)®|l><l| p)|10><10|. 

(iv) Suppose IIi,...n s are polynomially many k -projections, where k is a constant. Let 
II = Hi, and M = I — =11. Then the following channel can be implemented exactly. 

= ~tr(n ® /p)|00)(0G| + tr(M <g> |0)(0| p)|ll)<ll| + tr(M ® |1){1| p) |10)(10|. 

Proof: (i) The idea is same as what we did in the proof of theorem 13.11 In fact, such a 
channel can be written of the form $(p) = tr2(UpW), where U is given by equation ©. In 
this special case, U acts just on constant number of qubits, and then by lemma [2~T1 it can 
be implemented efficiently and with no error. 

(ii) Pick a random i, 1 < i < s, and apply <I>i. 

(iii) , (iv) are easy consequences of (i) and (ii). 

□ 
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3.3 a = 



Theorem 3.2 Quantum clique problem (<I>, k,a = 0,6), where $ is a q-c channel that can 
be implemented exactly by a polynomial time verifier is QMAx -complete. 

Proof: First we show that this problem is in QMAj. Given a channel <E> of the form Q, 
if a(<&) > k, then there are states p l ,...,p such that ^(p 1 ), ■ ■ ■ &(p ) have orthogonal 
supports. Hence, p 1 ® • • • <£> p k is a witness, and verifier can randomly choose two indices i,j, 
1 < i> j < k, apply $ on p l and p> , and then check whether ^(/o 1 ) and ^(p^) are orthogonal 
or not. Since $ is a q-c channel, $(/0 4 ) and are orthogonal iff the outcome of their 

measurement in the basis |1), . . . |r), never be the same. Note that, conditioned on i, j, the 
probability of a collision in the measurement is equal to tr($(p l )$( ( o : ')) = tr(S , $® 2 (p 2,: ')), 
and in general it is 

^]>>(S$«V J ))- (8) 

\k) i,j 

Thus, if (<£>, k, a = 0, 6) is a "yes" instance, (|8]) is equal to zero and we get to the right answer 
with probability 1. On the other hand, if it is a "no" instance then 

* 5>(s^V iJ ))>7U 

\k) i,j \k) 

and with probability at least ^jy& which is greater than an inverse polynomial, we get to a 

collision. Therefore, (<&, k, a = 0, b) is in QMAj. 

It remains to show that quantum clique, in the special case stated in the theorem, is 
QMAi-hard. By theorem quantum 4-SAT is QMAj-complete. Thus, if we establish a 
polynomial time reduction from quantum 4-SAT to quantum clique, we are done. 

Let (ill, ■ • ■ n s , e) be an instance of quantum 4-SAT problem. Define the channel <& as 
follows 

= -tr(Tl® I p)\QQ){m\+tr{M ® |0)(0|p)|ll)(ll| +tr(M (8 |1)<1| p)|10)(10|, 

where II = J^t Hi, and M = I — -II, and consider the instance (<&, k = 2, a = 0, -%e) of 
the quantum clique problem. Note that, $ is a q-c channel and by lemma [37T1 it can be 
implemented exactly by a quantum verifier. So ($, k = 2, a = 0, p-e) satisfies the conditions 
of theorem. The other parts of proof, that (IT, . . ,II a ,e) is a "yes" instance if and only 
(<I>, k — 2, a = 0, p-e), are exactly same as in the proof of theorem |3. II 

□ 



4 Complexity of computing Holevo capacity 

Here is the main theorem of this section. 

Theorem 4.1 Suppose 3> is a quantum channel that acts on an n-dimensional Hilbert space, 
and is given by poly(n) number of bits. Also, let c be a real number. Then deciding whether 
x( < I > ) > c, is HP -complete. 

To prove this theorem we show that this problem is " harder" that the problem of com- 
puting the minimum entropy of quantum channels, and then prove computing the minimum 
entropy is NP-complete. In fact, the minimum entropy of channel, equation ([3]), seems to 
be more tractable than the Holevo capacity. Then proving the N P-completeness of this 
problem is simpler. 
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Theorem 4.2 Assume <& is a quantum channel acting on an n- dimensional Hilbert space, 
and is given by polynomially many bits. Also, let c be a real number. Then deciding whether 
the minimum entropy of $ is less than c is NP -complete. 

First, using theorem 14.21 we prove theorem 14. 11 and then get to the N P-completeness of 
computing minimum entropy. 

Proof of theorem l4.lt First of all if $ is a channel and x(^) > c ^ then there are probability 
distribution {pi} and states px,...p s such that 

ff(£ft*(pO)-£ftff(*(ft))>c. (9) 

i i 

The point is that, we may assume s < n 2 , see [21| . Therefore, given this probability 
distribution and the quantum states, the verifier can check whether ([9]) holds or not. So, it 
is a problem in NP. 

To prove the hardness, since, by theorem 14.21 computing the minimum entropy is NP- 
complete, if we establish a reduction from minimum entropy to computing Holevo capacity 
we are done. 

Let ($, c) be an instance of minimum entropy problem as in theorem l4.21 Let |1), . . . |n) 
be an orthonormal basis for the Hilbert space. Also, let Xo, . . . X n 2_ 1 be the n-dimensional 
generalized Pauli matrices. That is, X mn+ d = T m R d , where T\j) = \j + 1 mod n) and 
R\i) = e 2ij7T / n \j). Define the channel * such that 

9{p®\i)(i\) = X i $(p)xl 

It is obvious that 

= maxiff V PiV(pi)) - V p l H{^{ Pi )) < logn- min #(*(/>)). (10) 

Pi, Pi ' * P 

i i 

Also, it is easy to see that the minimum entropy of 'J is equal to the minimum entropy of <J>. 
On the other hand, if the minimum entropy of $ is taken on \(f>) , and we let pi = \(f>) {(f>\ ®\i) (z| 
and pi — 1/n, for i — 1, . . . n, then equality holds in (|10p . It means that, the minimum 
entropy of $ is less than c if and only if the Holevo capacity of ^ is greater than log n — c. 
We are done 

□ 

4.1 Complexity of computing the minimum capacity of a quantum 
channel 

The only remaining step is the proof of theorem 14.21 To get a clearer proof it would be 
helpful to first state some lemmas. 

4.1.1 Some lemmas on the minimum entropy of channels 

In this section we study some properties of the points that a channel achieves its minimum 
entropy. Before stating the lemmas, remember that the von Neumann entropy is convex, 
and then the minimum entropy of a channel is attained on pure states. 

Lemma 4.1 Suppose $i, . . are k channels with the same input and output state spaces. 
Also, assume that the output states of every two of them are orthogonal. In other words, for 
any i,j, 1 < i < j < k, and any states p, p' , 

tr($ i (p)$ j (p')) = 0. 



12 



Then 

k k 

mmH(^2pi$i(p)) > 5^p i minfl'($i(p)) + H{ Pll . ..p k ), 



where, {pi, . . -Pk} is a probability distribution and H(p\, . . .p k ) is its entropy. In particular, 
the minimum entropy of^2^ =1 Pi^i is at least H(p\, . . -Pk), and equality holds iff there is p 
such that all states $>i(p) are pure. 



Proof: Since $i(p)'s have orthogonal supports 
k 

niff 

p 



i=l 



mmH(^2pi$i(p)) = imn^2-tr(pi$i(p)log(pi$i(p))) 

i 

= min^-p i tr($ i ( / o)log$ i (p) + logft$i(p)) 

i 

= min^p 4 i/($ l (p)) - ^p 4 logpi 



> y^p l mmH(<S> l {p))+H{p 1 ,...p k ). 



□ 

Lemma 4.2 Let $ trace &e f/ie channel that acts on the Hilbert space 7i£g>7i ; and traces out 
the second register: 

1>trace(p 12 ) = tr 2 (p 12 ) = p 1 . (11) 

Then, the minimum entropy of $>trace is zero, and it is achieved at the product states 

Proof: Let 1^12) be a pure state in TL ® 7i. By the Schmidt decomposition [2T], there are 
orthonormal bases and real non- negative numbers A^, such that 

hM = ]>>N)N')- (12) 

i 

Hence, <&(|^>i2)) = J2i an d ^ is a pure state if only if just one of Aj's is non-zero, or 

equivalently \1p12) is a product state. 

□ 

The next lemma is on the minimum entropy of the SWAP test, described in section [2. 81 

Lemma 4.3 Let $ swa p be the channel defined in equation |^]). Then the minimum entropy 
of the channel 

Hp) = ^trace(p) ® \u){u\ ® |000)(000| + ^K 2 )K 2 | ® |10)(10| <g> $ SMIa », 

where \u) G 7i cmrf |it' 12 ) G 7i <X> 7i are arbitrary states, is equal to H(2) = 1, and is attained 
at the pure states of the form \ip)\ip). 

Proof: By lemma |4~TI it is sufficient to show that states of form |?/>)|?/>) are the only states 
p such that ^trace(p) and & swap {p) are simultaneously pure. 

Using lemma FOl such a state p should be a product state |V>i)|^ 2 ). On the other hand, 
by equation (|1]), it is clear that $ su , a p(| ^1)1^2)) is pure iff KV'ilV^)! = 1) or equivalently 

IV>i> = 1^2). 
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□ 

For the next lemma, it is helpful to fix some notations. Let TL an n-dimcnsional Hubert 
space with the orthonormal basis { |1), . . . \ n)}. For any 1 < i < j < n, let Hy be the 
projection over + 

% = i(|i) + |i))«i| + (i|). 



Also, let H'^ be the projection over 4^(|«) — |j)), 



n' y - = - - 01). 



1 

2 ( 

Ily <g> is a projection and its operator norm is equal to one. Therefore, J2ij <8> 11^ 
is a hermitian matrix and its norm is at most (™). Thus, 



m = i®i- 1 V n y n' ., 

n(n — 1) ^ J 

ij 

is a positive semidefinite matrix, and does not have zero eigenvalue. It means that, \v' 12 ) is 
always in the support of the following channel. 

<S>cube( P ) = , 1} g^(n»j ^n' ijP )\vu}{vi2\ +tr(Mp)\v' 12 ){v' 12 \. (13) 

ij 

Lemma 4.4 Let |ui2);|i>i2) S Ti. ® Ti. be two orthogonal states, and define <fr C ube as in 
equation 113\) . TTien i/ie minimum entropy of the channel 



Hp) = ^trace{p) ® |«)(«| ® |000)(000| + ||«ia><«i 2 ] ® l 10 X 10 l ® *«u«w(p) 
+ ^c«6e(p) ® |H0)(110| 

is eguaZ to -ff(3) = log 3 and is attained at the states \tp12} = \^}\^}, where 

1 - 

\4,) = -= 1 £x i \i), (14) 

and Xi € {+1, — 1}- 

Proof: Again, using lemma fOl it suffices to show that the only states p such that ^trace(p), 
^swap(p) and &cube{p) are pure, are the states \tp) \tp) where is of the form (fT4l . 

In lemma H31 we showed if $t™ee(p) and $ S wap(p) are pure then p is a pure state of 
the form So, it remains to show that if $ C u6e(|V')IV')) is pure then |^) is of the form 

o. 

As we mentioned, |^i 2 ) is always in the support of & C ube (p) ■ Hence, if & C ube(\ip)\ip}) is 
pure then it is equal to \v' 12 )- L means that, <5> C ube(p) is pure if and only if 

tr(ll ij ®T% j p) =0, 

for any i, j. Let |<0) = X^^i), and suppose < &cu&e(|'0)|'0)) is pure. We have 

1 

4 



= (VKV|n y ® %\ii>)\ii>) = (m^Wim^) = t|a» + a/ia, - a, 1 2 . 



In other words, for any i, j, either Xi = Xj or Xi = —Xj. So, \ip) should be of the form fl!4[) . 

□ 



14 



4.1.2 Proof of theorem HT2l 

To prove the NP-hardncss of the problem of computing minimum entropy, we should find a 
reduction from an NP-complete problem to this one. The most comfortable such problem 
for us is the 2-Out-of-4-SAT problem [12]. We can formulate this problem as follows. Given 
to, = poly(n) vectors of the form 

n 

|A fc )=5>*|i>, 

i=l 

where for each k, 1 < k < to, there are exactly four non-zero af, and is zero or decide 
whether there exists a vector \ip) of the form (JT^J) orthogonal to all |Afc)'s, (A k \ip) = 0. 

Now we are ready to prove the theorem. Given a witness state p, we can check whether 
H($(p)) < c, in polynomial time. Therefore, this problem is in NP. 

To prove hardness, let |^4i), . . . \A m ) be an instance of 2-Out-of-4-SAT. Let 

1 m 

H=-J2\A k )(A k \®\A k )(A k \ 
to ' 
fc=i 

and define 

*h(p) = \tr(Hp)\w l2 ){w 12 \ + tr((I ®I-\h) p) \w' 12 ) (w' 12 \, 

where |wi2) and \w' l2 ) are two orthogonal states in Since the norm of is less than 

or equal to 1/2, \w' 12 ) is is always in the support of Then the minimum entropy of 
is zero and is achieved at the states \tp12) that are orthogonal to all k = 1, . . . , to. 

Now, define the channel 

$(p) = U> trace {p) ® \u){u\ ® |000)<000| + ~K 2 )« 2 | ® |10)<10| ® <t> swap (p) 

+ \<S>cuUp) <8> |110><110| + ^h(p) ® |iii><mj. 

By lemma |4~T1 the minimum entropy of <& is at least H(A) = 2, and equality holds if there 
exists |-0 12 > such that all the states ^tracedfe), $ W^Gfe) ^cu&eGV'ia) and ®h{\*I>V2) are 
pure. By lemma I4T41 such a state should be of the form \1p12) = \ip)\'4 ) )i where \ip) is of the 
form (fTl)) . Also, for such a state $ji(\ip)\ip)) is pure iff (ip\A k ) = 0, k = 1, . . . , m. Therefore, 
the minimum entropy of <£> is H(4), if and only if (\Ai), . . . \A m )) is a "yes" instance of 2- 
Out-of-4-SAT problem. Also, using the integrality of the problem there exists e > 1 /poly (n), 
such that ■ ■ ■ |An)) is a "yes" instance if and only if the minimum entropy of $ is less 

than 2 + e. Thus, computing the minimum entropy is NP-complete. 

4.2 Computing Holevo capacity of entanglement breaking channels 

We proved that computing the minimum entropy, and then, Holevo capacity are NP- 
complete. In these two theorems, we considered general quantum channels. But one suspects 
that if we restrict ourselves to a special class of quantum channels then we get to simpler 
problems. 

For example, let $ be a classical-quantum channel (c-q channel) 

71 

Hp) = 5>IpI*K (is) 

i=l 
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where |1), . . . \n) is an orthonormal basis and <7i, . . . cr« are arbitrary states. Then, obviously, 
the minimum entropy of $ is equal to 

min iJ(iTi), 

i 

and then, can be computed in polynomial time. Also, it is easy to see that computing the 
Holevo capacity of $ is a convex optimization problem and can be solved efficiently. 

Therefore, to get a non-trivial problem we should consider a more general class of quan- 
tum channels. Indeed, c-q channels that we considered in equation (|15p . and also q-c chan- 
nels, equation ([7]), are special cases of Entanglement breaking channels. An entanglement 
breaking channel is a channel $ of the form 

r 

Hp) =$>r(^pK (is) 
i=i 

where {Mi} is a POVM and o"i,...oy are arbitrary states. Although, it seems that the 
problem of computing the minimum entropy and Holevo capacity of entanglement breaking 
channels is simpler than the general case, we prove that these are also NP-complete. 

Theorem 4.3 Assume $ is an entanglement breaking channel of the form H16\) acting on 
an n- dimensional Hilbert space, and is given by polynomially many bits. Also let c be a real 
number. Then the questions of bounding the Holevo capacity and the minimum entropy of 

> c 

and 

miniJ($( j o)) < c, 

p 

are NP-complete. 

Note that, if we show that computing the minimum entropy for entanglement breaking 
channels is NP-hard, then by the same argument as in the proof of theorem 14. II we can prove 
the hardness of computing the Holevo capacity. Also, recall that, in the proof of theorem 
14.21 all the channels that we used were entanglement breaking except $t race . Therefore, if 
we replace $t race with an entanglement breaking channel that captures the same properties 
then we are done. 

The key idea is the following observation first appeared in 6 . Suppose p is the density 
matrix of a two-qubit state. Let ctq = /, <7i, <r 2 , 04 be the Pauli matrices. Also, for i = 1, 2, 3 
let = i(I ±0-^) be density matrices of the +1 and —1 eigenstates of a^. For < i, j < 3 
define Cij = tr{o~i <S> o-jp). Then, we know that 

1 3 

i,j=0 

If we rewrite this equation in terms of P^°, we get to 

1 3 

+(|-|c J o + i COj - Cu )pr®^ + 

+ (l + \c m ~\c Q] ~ ClJ )P+ ®P~ 

+ - | C *> - |COj + Cy)Pf ^ P i- 
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Suppose all the coefficients in this expression are non-negative. Then 

1 3 

+(§ - l c « + l c oj - c i]) p r 

+ (g + \c i0 - |coj - Cij )P l + 
+ {g - \c m - gCoj + Cy )Pj . 

In other words, tr2(p) can be written as a linear combination of states Pf~ with coefficients 
of the form tr(Mp), where {M} is some POVM. 

It means that, if the coefficients were always non- negative then p i— > tr2(p) was an 
entanglement breaking channel. To satisfy this extra assumption we can replace p with 
p e — 1/4(1 — e)I + ep, where < e < 1/16, and observe that the coefficients for p e are all 
non-negative. In general, we have the following lemma, proved in [6]. 

Lemma 4.5 Let p be a state inTL®TL where TL is an n- dimensional Hilbert space. Also let 
l/n 2 I be the maximally mixed state in7i®T-L and < e < 1/n 2 . Then l/n 2 (l — e)I + ep is 
an un-entangled state. Also, as a consequence, 

<S>' trace (p) = tr 2 (l/n 2 (l-e)I + ep) (17) 

is an entanglement breaking channel. 

Using this lemma, the proof of theorem 14.31 follows immediately. 

Proof of theorem I4.3t All the steps of the proof are same as in theorem 14. 2i except that 
we replace the channel $ trace with <&' trace , which is an entanglement breaking one. The only 
property we should check is that the minimum entropy of &' trace is achieved at product states. 
It holds because ir 2 (l/n 2 (l -e)I + ep) = l/n(l-e)I+etr 2 (p), and H(tr 2 {l/n 2 (l-e)I + ep)) 
is minimum if and only if H(tr2(p)) is minimum. 

□ 

5 Conclusion 

In this paper we prove that the quantum clique problem is QMA-complcte. This is obtained 
by considering an NP-complete problem, and somehow translating it to the language of 
quantum information theory. The key point is that clique problem in graphs can be stated 
in terms of zero error capacity. So, this translation is straightforward. Now the question 
is that whether this method can lead us to other QMA-complete problems. Note that this 
idea is first captured in the QMA-completeness of local Hamiltonian problem by considering 
NP-harness of SAT. 

In the second part of paper, we consider the problem of computing the Holevo capacity, 
and then, minimum entropy of a quantum channel, and prove that they are NP-complete. 
Since, there are few results on the computational complexity of invariants of quantum chan- 
nel, it would be a natural question to consider the complexity of other such quantities for 
channels as well as quantum states. 
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